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m&m i ] 

& s ^ - * & a;*j -r & £ xsmWr- * <DmmmMmmmu^<»mM.im& 
&*mx?z^m£*m~?z>mmmmmmftT'2^<z>mmKu k2ic#ltf(ki 

+K2, A)=F(K1, A)OF(K2, A) fc»fetHI»F(i ZL tOtt BT&^SlCfctt&z:^ 
^#^^0 K»SE AteS<Z>7c£^|-r o )©1iF(K, A)£##>£lC|^U StffBKS: 
mj@©^$!ttf>*aK [0] +K [1] +-K [m-1] {C#j§?U 

F(K, A)=F(K [T(0)] , A)OF(K [T(l)] , A)0-F(K [T(m-l)] , A) - (5$ 

1) 

<Z>2r32#tf>^F(K [T(0)] , A)^?>F(K [T(m-l)] , A);£T*£F(K [T(0)] , A), F 
(K CT(1)] , A) , — F(K [T(m-l)] , A)©JE#T*«M£l/TF(K, A) &|Effit5' t. 

o, irfgj (si) ®^&ffe> ferric *<Dn&mmzftvz.£$:ftWLt:'?z>m& 
mm s ^©ffis©iPfitN (n ^ 2 ) k j: ssi*** e> & & m-a-ic** u tti 

Oi:bT^NlCj;Sm^J^SI^AOB=A*B mod N.&^ALfcnf oT 
, ffrSHF&F(K, A)=A"K mod N (ZLZL^A'KliA^KmS:^^) T?fe<5Zlt$: 
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mmmmmmmw: & ic# - u & z: ^ * * m&m 1 mmnmrn 

t&ffflB«KW:K[j] = u*((2*t)"j)(0^u^(2*t)-l ,t=l,2,...„ )©JBK1#«I 
■to** 6] 

fltrfB (5*1) ©«»fc«^feOSC*©«««*ftff^3fcfc4«K.i:'reit* 

* 5 iB4toim«»B§&*©tt)re&. 

[»#*7] 

«9»»«KttK[j] = u*((2*t)"j)(0^u^(2"t)-l ,t-i,2 f ...y©iicdia 

t&IB S tt, ^l&ftGFCp) (pttfRR) £ fcfci:GF(2"n) (- r T'nfcj; 1 JB*_t©fijR) JLT? 
5t*£*l£ffiRlBli&8E© ; e-^;i/ • ^i^flST^ot, fro, F(K, A)= KAT*& 

VXWMO*MVt=.%<£>1tm.~? B W*>. SofBKA^BtffHK^iE© i: t*AOAOA—OA 

> 

(Kfl) fc*U f?fSBK^©i:^tt(-A)0(-A)0(-A)0-0(-A)(|K|M)^^L/ 
1 „ ttfSaK^0©i:^ttt5IHEJt©MIS^(the point at infinity)0 

«ta^«©^m^^= 

[ft:** 10] 

t&IESIffcKteK [ j] = u* ((2*0* j)(0^u^(2"t)-l ,t = 1,2,.... )©7£IC##J 
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im*m 1 1 ] 

[0 0 0 1] 
[0 0 0 2] 

frzn, nmv>&%i*:$:w, mft-zsmn&Zo mft^miztezn, 

fr*>mmZftZ>^-?> K£S«U FtC^oT, ^r-*&m>i£^<?)M 

IG^-K©H^«, 01 lc^-T<fce)tc, FiOl©_t{c, lc^7-Kffl^y^i 
- 02£Jg«Lfc:fc©T'&5o HlC^idlC — Jt£lCIC#- Ktt, IS07816©gi& 

^bm^^^^y-^^^^^O^-^^jlM^fT^CW.Rankl and Effing : 
SMARTCARD HANDBOOK, John Wiley & Sons, 1997, pp.41#M)o 

, Affi* (i/o) /K-h207, n • :7a-fey-tf-2027!>M=>&£ (n • ^n-fey-frttfc 

v^^=fc&£) 0 cpu2oi«, tbmmM^nmmM-kztft^mm.'vib*), mmm 
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f2'tt^ifi2 0 4 tt, R0M(Read Only Memory) RAM (Random Access Memory), EE 
PROM (Electrical Erasable Programmable Read Only Memory) & i£ ROM 
ft*, 3E35T*£fcv***ey-T?&y, ±C^n^AI:«it6)l ! E , ;Tfft*. RAM 

8T£*l.£fc#>, RAMCDp^te; £^£*l&<&So EEPR0M&, mM<D@k&tfq*Wi 

*>tis. «*.«, ^u^>f f#- KT?©^y<>f F©«jR3feifit f ^ffl-rsfctjf 

EEPR0M-e^#$tl-5c 

Sfc#>, MfcflM*fc*I*Ufcy, A-F©i#»*e«P*«3a«:^fc«)K:«v^&*i 

So 1C557- FTOBff-^&^-rsnibsii, e^rA'dijxAoffttcB 

^a©w^Hff#^«i3tstis«riBf£*^i^stiTVNS 0 y-# 
^-f **»e>«»s*iTv^««*&a!r3t"rs^i:K:j:y«8B"r*^i:^*es, 3© 

gcVE&tiDSMHtt, John Wiley & sonsfl: W.Rankl & W. Effing^ r Smart Card Ha 
ndbookj (08.5.1-1 Passive protective mechanisms (263^— S^) {C 3.® J: 5 

l K:^*>ofe^tc**S:mJI , r*. Ax203lc£^T&> A* F9 
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So ^HlLT^S^-^Clfe^LT, «:fr^#301^302<DJ:?lC||fcS.. ZL<D 

[0 0 0 3] 
[0 0 0 4] 
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sr^sL-rs^ii, mB&mmz. #5fc©*>©£kmfc£%©ic^fl;3i*:5fc© 

«U $gHF(K, A)#, Kl, K2JC*fU F(K1 + K2, A) = F(K1, A)OF(K2, A) ZWl 
fetrt^fttS. 3©<&«$:^UjgLffiV^r£:lCj:*K K&m«(D^i!c©ftJ 
K[0] +K[1] +•••+ K[m-1] K&MLfcHI** 

F(K, A) = F(K[0], A)OF(K[l], A)0. ..OF(K [m-1] , A) 
£fc§r£#;b^5o ZL<D&%tZWlt~-?Ft:VT. F(K, A) = A*k mod N (i© 

ttWAOBtt, A*B mod NT?&§) F(k, A) = kA (*SU AfctffRftljUt 
©j&, $gU£Ott, #Bffi*§Lh©&©ftJ^irC% kAli, kZkffitiQ%.Z>Unzm-? 
) 

r©4£ft£#I#bT, #F(K[0], A), F(K[1], A), ... , F(K[m- 
1], A)S:ffBb, ZttZm^T. F(K, A) = F(K[0], A)OF(K[l], A)O...OF(K 

[m-i], k)*mmzmm.?2>ttt>viz. ma, vmmzmft-tzfc&iz, o, i 

,2,..., m-l$:«g|TlCJ;oTM^#X.fe^mT(0), T(l), T(m-l)lCgo^ 
T. t&CHJIi^&^XU F(K, A) = F(K[T(0)], A)OF(K [T(l)] , A)O...OF(K[T 

(m-i)], D£^ommwi&T*nn*2>o 
r m$m iz <fc o t , $ *i s mijmm izmn z> Mftmm& £ w t* » ^© ^ 

ft-T 3 © £ C 3 £ ic y , . «^©43»H:ra*i- * fc«>* S e> jcsar*tt«^n? * 
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[0 0 0 5] 

^Xte, m*m*}W m^mmxr^i m&mm) A.J.Menezes, P.C. van 
Oorschot, S. A.Vanstone^f Handbook of Applied Cryptography, (CRC-Press) 

&£iznL<mmztix^2> a mR&mm^iz-D^Ti*. mm&o-AK&^x 
#^tifeN. nzrvvm («##-sr) mmr^vx^iLmnm^mmxrs 

-^ic^ngtHiP# (#*f^int#) ^cfcv^Ttt, &bm*©#ic 

>&§LL(Z>gMc jgtt L T 5fil M L T v * S © ft P3 ffi ffiHgF* 

fS^lCRSABip-^SrmWt-So 
RSAH&^T'tt, *£&itit «*.l*512l£y h(Z>2o<Z>itUtp,q<Z>^ N = pq £ N 
fc2V*Kl3llfc» e (IC#- K*T?Wu 3^. 65537#;gVM*>*i<g> r £##V^ & y 

, :nx&4!tgBSi£: vx&mmmz&m-fZo z\<dh%. z.(n'jmm<DW*>^k\z 

y = M"e mod N 

thxm^tLx^m-t^o z\z\x. remcDemzm-tm-zftz* 

ZCDm^JC C SStHRofeAHu xe mod (p-1) (q-l) = lfc&StJ&il x &;gv\ 
T 
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S = y"x mod N 

SrfUM**. r3T% (P-D(q-I)tt, N<Z)^>r^-g8t!t©Mphi(N)T'feS„ 

y* ((p-D(q-D) mod n = l 

-#T?, xe = 1 + k(p-l)(q-l) (k&^gfc) 

y*x mod N 

= r (xe) mod N 

= M*(l+k(p-l)(q-l)) mod N 

= M*M" (k(p-l)(q-l)) mod N 

= M 

#f£U££o 0 tot, y'xmod N$rftS-rSZli:T% A«, £tf&#B<Z>¥:x: M £tg 

N©^Hilt p, q ^Mv%fetiTV>sr htt, @*TMJ|-e^>-5o N 
©^HISc^$:^$^vaT% x&ff#S-rs#&te^£>*iT^&v> 0 *£fciii£5[tf> 

*<Dm.%h bfc^(semigroup)©_hl:^-rsr^^T*^So affile, Ntfiilffc 

T^-f • f"x.>r ^^jS (additional chain method) £ Wg&ti & %<D T? 

ZLZllC^t-©«, y*x mod NCDff^C?:. S^H * ©bf y h £ 2 if y h#{C 

Jt&fre>ic/v-ev^, *nt>K oo,oi,io,ii©v>-r4x"efe<5AHc^DT 

, A[0] = 1, A[l] = y, A [2] = y*2 mod N, A [3] = y*3 mod N £*fjS£it, f£ 

nffl&nm*ft5z.£\ l z£'DTmmvt=.%<DT'$>z> 0 torn. hmz&w 
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lJC*JJBftb0411, 

zvfotzftfrtizm&m&mnizis^Ti,*, xw^b (21^ n 

3M£#II£0403, 0404, 0405, 0406««ff t>tl, 0407, 0408, 

0409, 0410<JD3HIHHjfetM|t* c ff*>*l*. d<Z>HS> M&£<Z>tt> <y— "?7l/0401©fc 
:A[0], A[l], A[2] ,-A[3]T?**. -«KlflUMi[&ffJm*LJS#fi<' 

#<<Z>IC#- KT?t±, ftfl!H**U9*JBa>=z • ^n-feyif-tfmv^tiTv^) v 

*©BU V*. #iC #«rffMFCDil(C, A[0], A[l], A[ 

2], A[3]CDQ*.> if*l*^3aStlTV>S^^*)^Sr ffim<Df=.tb. 16 

fcf<5/ h CD ff-^ MiH y = 58981, N = 59989 (=239*251) tLT, A[ 

o], .ah], a[2], a[3] Z2m&mm?zz:. 

A [0] = 0000000000000001 

A[l] = 0011001010011000 

A [2] = 1011001011001110 

A [3] = 1001111110010101 

4!=24$i*; Z^H. ft*<*©lfy h A°# - > £ jlottS 3 

. N^2048if v b<DM&. mm±mmftffi*ft?<z>iz*-*imT*&z>-t)K 

*i/UXZi-7Zm^Tryzf<Dmmnj3Z&ZZ£tfT?%niZ', x (2000fcfy 
bUM) <bm*:ftZ>^\*.. 2000tfy hSft©tft^©JJt (2 If y h#lCg^oTV> 
tltf. $J1000f@tf>$&) &4jt*JK:4HBUfcfc, ^©4 jty^-tl^4xCoV>T, g'J 
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^£ (x[0]x[l]-x[511])^#<. Z-3T\ x[j]«, 2^h^0>y^T% 00, 01 
, 10, ll©V%-rtl*HC^LVN=fo©i:i-Sc 

ttCaMC. B[j] = y*(4"(511-j))) mod N( j = 0, 1, . . . , 511)^-^^ 
=M??„ S=ylC:&J|8>ff;$:^0501. # ? > # j£512lC-fe y h f£0502 o r©512h 
V^-fitte:, 1024lf y h£2Tf!lo£: : fo<D-e&£o (irtll 2fcTy h-3o#l3lL 
T^£©T?, rOD-fit^S^ =&U 4tf y b^T'fetlli, 1024/4 = 256 

%©T*&£ 0 M^7^#;tf^£nTV>&tt*U£, 05041CT. SfcRAMlC^f 
S„ J6*T. #*>#KC*f-tSS<Z>l»£B[j-l] 3(Z>t§1§N B[0], B[l], .. 

. , b[sii] £svucRAM±Tm^#£vvj:e>ici&$-r§ 0 mivz^izi 
024tf^h (i28A^h) mzmmmzmm-tz* rrt-n i*$if£-e7K 

l/X#fjy^e>;ftT^S : ty<Di:-r£o Z\(DH^. "r-Zy-jXVS., 10241? y h=l 
28/W h 1287t>f h#0)T Kl^XlC^-^;i/S:iBg-r-5o 

VN3 h&^e> £T*=bfcV^ 05051CT. S£&NGD=fc £ Tf^t" 4^ff 

^> 0506£T;*7^># 'J^>M, ^##H£&3g0503lcM£o JS*T. 

**7&##»fcs*i5**e, d(z>*f^€:5i2iaift»;jg'r. z-ommz&^x. * 

yy#) = 512{C*fLTfcL B[511]tt, yil&U. 511{C#LTtt, B[510]». y*4 
■od Nfcfc»J, MTmmiZ. ijyyZttZttLTlZ. B[j-1] = y*(4"(512-j)) mo 

0)1?*/ Mc&flc#Lfcv> 0 

*#^«[«i3il0503©«FT*fr*«»feStlfc»^ 0507JCT. S£ 1 IC^ffcf 
So X, 0508{CT, jSrOlC^-TSo ^#^^S0509{CT, & U j 

#512&CfcoTV%*U;£, $S71-505l9 o U ^T^##aj£$*lTV^^;&ib 
x[j]©<fil& §1^0510, 0511, 0512, 0513. ^tl^tlCO^^I^lCM bt, 05 



1 0 
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14, 0515, 0516, 0517<Z)#t3S£f?e>o *<D&. 05181CT. #?>#&-f>*U* 

Z.<DMmV. sEV^Ugktfmbft&M&l*. 0514, 0515, 0516, 0517©^3SJC 
£V>T, SIC, 
C[j] = B[j]"x[j] mod N( j = 0, 1, 2, ... , 511 ) 

S = C[0]*C[1]*...*C[511] mod N 

= (y"(x[0]*4"511))* (y* (x[0]*4"510))* ... * (y"x[0]) mod N 
= y* (x[0]*4*511 + x[l]*4"510 + ... + x[511]) mod N 
= y*x mod N 

y"2 = x"3 + ax"2 + bx +c 

y"2 + cy = x"3 + ax + b Xtt, 
y"2 + xy = x*3 ■+ ax + b 

point at infinity)0£-^#)T%;lS) . *»Hffl^©^tt, 08©<fc^^%ffl 
tCJ&So ®8tt, y*2 = x*3 ZxZBVf^OX'SbZ-bK «f RffilRfcJlMKW:, « 

mzwfrte^k^o$kft*i&mhi'?z>o x. msit. mm^omr'&v. mm. 
^f5t^2T*^v^^ico^Tfi^-rso x. m^T*&m&(Di$* 



1 1 
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mm p sr^ii-rs^^©^^ z( P ) zm%.z>o z(p)ic&^t&, 

GF(p)©7t$:^ISlC^O#^ f(X) *3%7L. GF(p)lC 

•g-*ti^v%%©&GF(p)ic^in-rsr mz iot, fTLv^fc^-rsriitfT- 

GF( P )©;£|^fcfSim*ft£v^,o GF( P )<D^I«ftlfc&*#©7t 

saw* 510 . z<DW&&nTfttnm*£.&t>&&st:xm^mLxttmKmv 

(the point at inf inity) t "5 ^OD &#X., 3 (virtual point)T^ 
fc>oTV^=bCD£:#&-to MRSii,&(the point at inf inity) £0£*< „ 
#<Z>«l#&tt. rZltil 19* tf, £f^M^ (projective coordi 

nate^MV^^fc^So IgJig^ 

, lk<D£olZ-t2> 0 3iS©^7t¥®^e>M* (origin) LfcH^fc 

H£-T5„ H©j&©ffi«(x,.y)K:S*bT, x£X/Z, y$:Y/Zi:g^T, Zl*l£(X,Y 
,2) £^t>3fcjri<D&t3$X.Z>. OX^VNX*^-clC*f-L. (cX, cY, cZ) 

tt. H±C?)^-©*JC*fiS-rSo ^lC-g-^.«. 3#C5^F^C£^T. (cX, cY, cZ) 

(citoxt^)tm^^^^xm-nLr^%o^t^t^z\tt^x^^o £fc 

, MBQmXIZ. (X, Y, 0)£V^J£<Z>,& GEtttCtt. ^OM^(equivalent c 
lass)) ^RSLACthe point at inf inity) OlC^fS:^ 3. (-JKKI, If RlM 
(elliptic curve) ^-^tf^^ft: (algebraic variety) it. &te&!Bl<D±V*Z 

^S3i:^#v\ ) mHftm±<D&p£xmizmisXMmte&n^%>2>& 

$:P©^7ni:VAVN, -PT*3t1\ G(E/Fq)C£#£-£J>£kM;&nAfcfctf>£, kP % -P 
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, ^OiD^lCKLT, &Bg3t,£(the point at inf inity)0te. jtS<Z>8tT'<Z>$StH 

G(E/GF(q))t»< 3 G(E/GF(q)) (Dfllattt 

mm±<Dmmttmmm&mm-e2b2> r ^ teaser v^„ 

ElGamal^Sr^-r-So 

P#^lil2;ixTv^:fc(Z>i:-r3o 

STEP 1. £«#Bftte, iE^Ht X [BJ feauf, Zl*l«:tHMii:bTfitf*U 
Y[B] = X[B]P 

STEP 2. j3|«# Aftte, a« r 
CI = rP 
C2 = M + rY [B] 

STEP 3. ^fg#Bfttt, Cl,C2fc3SW«t*;. e^©»«ttX[B]«:ffiV>T, 
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C2 X[B]C1 = M 
9 £ #f £ 5 o 

JUXAKl#»tC38HKLTV>S. kP(kttE«E»)&fM|frs«fliW3Q!r/I/JyX 

f-^^5o ^^m»^?I^JC33VxT«. mod N^(Z)0^ li, 25H. 3Bk 
iZttfclsX. P[0]=0 (&|8£&(the point at infinity)) , P [1] =P, P[2] = 2P 
, ?[3] = 3?^mM-T £(0801). 7£lC. ff»M©^©'fitS:l0^bt--50802 o &lZf& 

S £ m-* 5*3.310804 ^Hfflitt, k<Z)l^yh(D>fii (2fc?yh#) £|1 
T£:#3H£LT0805, 0806, 0807. 08083 *l £ tCjtfJ&'fSj&P [0] =0, P[l], P[2] 
, P[3] Sri0ASO8O9, 0810, 0811, 0812„ ZKZ^JafckcDlf v V tfR£Z> t. 
V2>ZiHZ&*)^ kP*$fBiT2>z:h:tfT*%2>o r©ifjr«k<Z)Jt&fr 2 fcf y h 

. ffinmm±<DMmwimz. **i-eru zoo, G(E/GF(q))fcv^ft»*©-tT?fx 

* if y x A tc «fc y mm £ ti s o 

k©i^-/ h (i©«-ett2 try h#) ©a^jct.y, #n£#f?;foft-5tf>T% =&L 
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ic^ < l & rs At ibis isxmm±.mtoTmmte&-e&z>o r 

-^;l/^t$:RAM^cs*^^•^tl^^^e>^v^ 0 *fraffi^BiF#-e«> ^-^om»#, 

A;fr#Mk#T*&£ODT?, ROM^, EEPROMO^^^g^ftCO^^'^C^ 

-&®1 1, 1 2lC^-r o fcfc, 01 1 07D-f^- h©T^&® 1 207D 

irt'tt, 160tf^/ hc^x^-^tm^^^^^S^-tSo ft. flfRlBflMiF 
#T?<Z>g^R160t^y RSAB£-i§-0>§i:RlO24^y hO^lC^i"-^ 

*lTV^ 0 J^T. k(D-mmm^ (k[0]k[l]-k[79])il»<„ x[j]» 

% 2t?yh:/ny*T% oo, oi, 10, ii<zn%-f *ijwc^bv%%©h-r& 0 

^-^;i/B[j] = (4"(79-j))P( j = 0, 1, 79 Vl&lCtfmb, EEPR0 

EPROMIC&^LT 01 l©MaraT'*5c ^tit 3!lllftlC 

£1\ S=PlC:&J$§<ffc£ffVN0901. ^J^>^r jS:160lC-fe^ hi"S0902 o r©80£ 
V>^#tt, 160^*/ h£2T*tfo7c 2tfy ht5o^SL 
TV^<JDT> r©t?»*tf, fcU 4tT-/ hMST^tlli, 160/4 = 40 

%(Z>T&S 0 ^T^fWPk^TV^tftU*. 09041CT, S&RAmcfeffti" 
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jwt. nzMirzsomzBU-i] tm< 0 zam-e?. b[oi, biu, 

. , B[79]£SVNlCRAM±T*fi^#fcV^e>&Cte^£ 0 «J»*iS©«tt, RSABt 
#JCMi-Sffig0 7lCfe^T, 128^>T h<Z>gp#£l0/1-f MCg&*.£ 3 i: IC£ 
oT#e>*l£„ fe*A& 09051CT. S$r*|RffiijS±©Sllt©St*'e4#i-S 0 4^ 
ffUMJU 0906lCT#tf ># j*-?* U :*> h U ^#^^0903(CMSo J£*T 

= 80lC*fbT. B[79]tt, Pfcfcy, 79fC*fLT. B [78] Ji, 4PfcJk»J, 
J£TFH«K:, *$r.>*jK:#LTt*, B[j-1] =(4* (79-j))P#£jfcS;flSo 

*#^tt*a3a0903©»T^#^»feStlfe»^ 09071CT, S£0 -(4HlSSLft(t 
he point at infinity)) KSrJBHfcf*. X. 09081CT, iJ *J > * j feOICSHg? 
So ^#^^SI09091CT, t»U j#80tC&oT^*U£, i?&T-r£0919 o % b 
. ^T^ff#^M3*lTV*&^fce>tf. k [j]tf>>ji!£ ig^OgiO, 0911, 0912, 0913 
. ^tl^tl©^ff^lC*rLT. 0914, 0915, 0916, 0917©flt3l£fTe> . 
„ 09181CT. *^>^$:>f^';^>M, ^#^MS09091CMSo 

wCiit', iEL/VA^*^e)tl€>Sfi«, 0914, 0915, 0916, 0917©fll3liC 
fcV%T, SIC. 
C[j] = k[j]*B[j] ( j = 0, 1, 2, ... , 79 ) 

S = C[0]+C[l]+...+C[511] 

= k[0]*(4*79)P + k[l]*(4*78)P + ... + k [79] P 
= (k[0]*4*79 + k[l]*4"78 + ... + k[79])P 
= kP 
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33, 01 3—0 1 507D-ft- hl*Z.<Z>m<OM f glZi&mLfc—m<D : b<DV2b 
2> e 1024l^y h ©RSAflg-5§-#t3l (m$kffl&mm S = y'x mod N& 

H ff -T 3 it &> <D *> (Z> 7? 2b Z> o 

SfcylCMMbLlOOl, #?>*j£5l2{C^5t1-5l002 o 7*tC, &##«tf&3SlOO 
31CT, ^T^#©W^S:^e)o #C&C S£RAM{Cfe*ft-r£1004 o rtfMg 
£#?>#jlC*fb7:, B[j] 0 5~0 7{Cfctt£#t3i£im*aiJC, 

^V^^C^=EUJt7?M^L^V^J:^^CgBgLTV^<%©^t- S 0 ) S 
£ &N©T7? 431 b 1005, ii*7>* J&T? U h L1006, ||^#^^31100 
3iCMSc d<Z>ii<fm, 512HI^*Jjg£*l„ 0 1 4©^Sl007lC#-5 o 10077?«:, 

jtcwi-s^#^jji£?fe> 0 zLtittjRTfl^Ta&y, j#5i27?fctt 

*l«, 1008tf>#L3l{Cjitfo 10087?H:, SI 6lC^-r«J:e)^^>^ASmM©EEPR 
OMM^PERM.tmp^ P> j # a <Z>ffiV( j) & U - K*f"<5„ 016 <fc V V( j) 

ictt, &£>;frE«>0, 1, 2,..., 5ll£^>#i*lcM^#;t£%<Z>#gB«£*i7:v> 
£=fc<Z>£i-£„ 10091CT, V(j)&, V(j) = ((17*(V(j)+l) mod 513) UZ 

#0>V(j) SrRAMtC^bTfe^, — ISl/TH^flit't* <fc o ldg^£^£7?&5) 

^S(n) = {1, 2, 3, n } ±7? £83*1 £38* U(w) = a*w mod (n+1) 

^L-^ V y KOSI^^^^lC^^S.fceiC a#n+lhSV^Ci|it7? 
a», &n+l{c*fL7:5££^o^e>, 
ZK&J^&alcMUTte, ^UliSC^^PjSC^^^^itCbijectio^Tr^So 
-i"VN^*l«, 1, 2, 3, n&M.'<Wx.2>mM'V&2>* tot, U(w) = 

17*w mod 513&, 513=3*3*3*19 17#SV\fC|g7r&£;^ M 1, 2, 3, 5 
12 }±<D±mttT*2bZ>o fot, 1009lC3^*l§^g|((17*(w+l) mod 513) UZ 

, { o, i, 2, 511} ?:t/<fiS3i:Ws 0 i7£vo$cte, — « 
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t'feot, 513£2V^Cire&:Mi, { 0, 1, 2, .... 511} ©fi&tlt5. 

1009©#13I<Z>&, 1023T*;*7?># j&-f >i";^>ht5. 3 ©^^5120^ 
»J*gU 01 5lCj3#S1010<Z)MsiC*ttf o 1010T-&, nZ$S$:UZ®Mfc-t2>o 

*^>^jS:0lcM>fb-rS1011 o #ac, 1012JCT, i}V>* j&S12V$>2> 
#£e>*>£«5£U ^##m$*iTV^;m7i-5i022 o ^73MWiifc£ 
*lTV^#*U£, 1013, 1014, 1015, 1016©^##li£#t ! JI£fT 3 = ZKMUti:, 
(secret exponent)x©V(j)#a©^t$:^^T'^#^•rS =fe©T'*>^ 

#V^&3l£?T?z:£lC&;§;i-S 0 C!:n^©^##«L3ll013, 1014, 1015, 10 
16lCjfrjSl/T, 1017, 1018, 1019, 1020£>#lS£:!!?Ti~&o 1018, 1019, 1020© 
#t3SlC23V%Tte, V(j)©#tiC*flS-rSB[V(j)3 &^T!il3lfg^&3i£^f f 3 
0 1017, 1018, 1019, 1020©*Q.3l£^*-£^, ij V > Z j &>f > * U * > h L102 
1, ^##H£flt.3ll012lCM3o 

r ©^rax-iE u v ^jgtfft e> tv s 3® a itot ©it *; T & -5 o 

1017, 1018, 1019, 1020tf>#t.g&CfcV>T, SIC, 

C[V(j)] = B[V(j)]*x[V(j)] mod N( j = 0, 1, 2, ... , 511 ) 

S = C[V(0)]*C[V(1)]*...*C[V(511)] mod N 

= (y*(x[V(0)]*4*(511-V(0)))* (y*(x[V(l)]*4*(512-V(l)))*.... * (y*(x[V( 
0)]*4*(511-V(511))) mod N ' 

= y*(x[V(0)]*4*(511-V(0))+x[V(l)]*4*(512-V(l))+ ... +x [V(0)] *4* (511-V( 
511)) mod N 

Z1Z1T% ^V^ffiM^b, V(0), V(l), ... , V(511)kl:, 0, 1, ... , 5115: 

x[V(0)]*4*(511-V(0))+x[V(l)]*4*(512-V(l))+ ... +x [V(0)] *4" (511-V(511) 
», x[0]*4"511 + x[l]*4*510 + ... + x[511] {C^bV%„ ^oT, Ste, y*x mod 

1 8 mH# 2001-3092549 



$#2 001 — 0 97964 



x©^Mt otiA^^bTimUcicjavN'fiitc^sfe^ oo, 01, 10, n^vo 

1191. 2, 3, 5<D5gJg#I<E>~oT?&So 

mi 7~2 0T?zRtHS«li, 160 If y h©ffRffi*§Ut#*a.31 (#R.ft»E±© 
jftP©^*9—**J|t) S = kPZmft-tZIZ. to<D*><DX'& So #Rffi^l«. 

Sfc^-X/K-f > hPlC^ftbllOl, jS:80lC|g^-rsil02 o 3fctC. & 

##0£*Q.3illO3JCT, ^T^#0frj^$:^p 0 &lc. S£RAMtC&M-t«51104 o ( 

So ) mz, SSr#Rffi^E(D±T*4^L/1105. # ? > # j U * > h U1106, 

Stf^#£Nt£#l3ill03lCJiSo ZlCDtHm^ 80EI»Uig3*U 0 1 8 tf>#L3lll07 
tC5&S 0 1107T*&, jlCK-tS^fM^fc^o rtltt^TW^T* 

j#80-efctt*lfc£, 1108tf>#UllC5tfro 1108-ett. H2 OIC^-TJ:^^^ 
> # ©EEPROMM^cPERM_tm P ){)> j # g C^V (j)SU-KtS. 02 0 

JC^-T^IC V(j)lCte, &b^D«>0, 1, 2,..., 79§:^>^Atcafe/^#^.fc 
=b©^lBttStlTVNSt;Oi:f So #CK1, 11091CT, V(j)£, V(j) = ((7*(V(j) 
+1) mod 81) ll:J:otf§i^S (#§&6£MT*«:. j#lC#£&*.T^S#, E 
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o ZL©^##> { 1, 2, 3, 79 } =fo©Tr&£ 

7i:v^e>iS:tt. -Mt'feot, 8i£swci5i-e&*u£, { o, i, 2, su 

1109©^©#> 1123"e;?J?># j£-f > h^-So r<Z)^$:80ia^ 

point at infinity)) iZ^JMit-tSo # ? > # j£(HC3!JJ8§ft;-r£llllo 

#CtC. 1112fCT, #?>#j#80T*&Sfr£e>^£^>£U «&##iiifc£*lT 
tl^Ti-S1122 0 ^T^##iik£ftTV%&tt*U;£, 1113. 1114, 1115. 11 
1600kftftm#kM : kfi ? = Z.<DmM\%. X#^-k©V(j)#S©|l£^^# 

13. 1114. 1115. 1116JC*f/&LT, 1117. 1118, 1119. 1 120<£>#t3l £H?rt-&o 
1118. 1119. 1120<Z>#! ! 3glC;i3^T&. V(j)©#[C*flS-rSB [V(j)] £Mv>T*fB 

mm±<Dm<D$imzmfi-tz>o 1117. ins. 1119, 1120©^?:^^^ r*7? 

>#j£>f>*y;*>hbll21, ^fEF^^1112{CM-5o 
3 OjiOilT' IE L V^:SI#^ b ti 5 31 Oil U ^ & £ o 

1117, 1118, 1119, mOOD&JlJC^T, SC, 
C[V(j)] = k[V(j)]*B[V(j)] mod N( j = 0, 1, 2, ... , 79 ) 

S = C[V(0)]+C[V(l)] + ...+C[V(511)] 

= (k[V(0)]*4"(79-V(0))P+ (k[V(l)]*4*(512-V(l))P+ ... + (k [V(0)] *4" (511 
-V(511))P 

= (k[V(0)]*4"(79-V(0))+k[V(l)]*4*(79-V(l))+ ... +k [V(0)] *4" (79-V(79))) 

P 
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ZLZ1T% ^V©ffiS*^> V(0), V(l), ... , V(79)«U 0, 1, ... , 79£M 

k [V (0) ] *4* (79-V (0) ) +k [V (1) ] *4* (79-V (1) ) + ... +k [V (0) ] *4* (79-V (79) ) 
k[0]*4*79 + k[l]*4*78 + ... + k [79] IC^LV\„ ^ot. Sit. kPlC^l^ 

o 

, 12x^1^1) <Dmntt.it. ^b<M^e e hi i, i 2©#t3rea:> ± 
teif ^ hfr*>mizmff2i\zitto, \?v h4$<Dmmmj]<Dm^zmM-?2>z.niz 
<fcu> ^^^^"e^snrigtt^feSc *mmm<Dmmizi3^Ti$. m 

xm^^ft&^-h^-^n^v hit. OiH^WLTHIJtlCjav^iC^Sfci?), 0 
o, oi, io, ntv^MO^ Steele mag** fc«>* ^#<>D^J|l#8§#-e# 
5. d*u*, *fti&9t:&9(i, 2, 4, 5 ©HJgM<z>-o 

(2*m 1)P = (2*m)P + (-P) 

mz.lt. 195&, zzmmx. 1 100001 lii^ttstf, rtife, 2bf-/^Dy*tC 
#SIU (11,00, oo,n)£§< 0 T&^£>JiTv>< *gotcii#&s<z>T\ 11 
tfJJt&lClfcflnx.. (11,00,01,11) fc-TSo S_hmc%ll#&£tf>T% uz?±mz 

iZMz.. (01,11,00,01,11) tts. r<z)i:e>ic^L££:£&i> iiz-inm& 

^^ftf : 195 = 3*4" 3 + 0*4" 2 + 0*4 + 3 
^.Wk%k : 195 = 1*4" 4 + (-4" 3) + 0*4*2 + 1*4 + (-1) 
ilLT^tS. Z.tllt. 3 = 4 lHWgWiTLX^ZCDiimmX&Zo 
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195P = 1*((4"4)P) (4*3)P + 0*((4*2)P) + 1*4P - P 

o 

) 2>\ ZlZlT-te, S)e>^C«)fflibtfe<ri:mS. Si^k'^ EEPROMfCfe 
£1% 02 lCD^aiC^oTP[j] = (4*j)P( j = 0, 1, 2, ... , 80 

, ^/y^ry^f-^MMts. *-r. s&^-*#>r>hPtc:fca*8fl;Li2oi 

, #?>#j£8(HC^i£-rS1202 o #IC, ^#^^S12031CT, ^T^#©f!l 
5££fT?o SSrRAMlC^-r<51204 o (J^T, Z. ttZtt IT 

, B[j] 0 5~®7lCzjtLfe^!.Si:|^#lC> #B[j]tt, SWC^U 

±"em^b3&V>J;^^@ESbTV\<=fo©i:i-^ 0 ) #CJC. S$:*tRffi^E<Z)JhT'4 
^L1205, ##>*j&^*y*>l*U1206, St?^7>^ai203lCMSo 3 
©Igfm, 80H»»JjgStl, 02 2£atLfc*rai207{C5££„ 1207T'tt> 

^>^j{cii-rs^#^$:^Po rti«^Tf^T*«>»;, jmoT'tettmx, 12 

08©«ta{Cait?o 1208T-&, 02 0 Km^t <fc 5 #*2>g£l/g©EEPR0M^cPE 
RM_tmp^P>j #S©'fitV(j)S:y- K-T<5= 0 2 0 iCjorT <fe 5 fc, V(j){Cl±, & 
b^C&O, 1, 2,..., 79$:^>^AlcM^#A^%©^ieesnTVN^=fe©t 
t5„ #CIC 12091CT. V(j)£, V(j) = ((7*(V(j)+l) mod 81) HC«fcoT»£ 
rCDSfctfstf, { 1, 2, 3, 79 } *M.'<W7LZ>*j(DV$>Z> % 
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izKsm^mmztt*&*mmmT*7]khfe%<D}immT*%>2> 0 torn. 7t^^mt 

, -fllTf&oT, 81i:2VNlC^T*$>n«, { 0, 1, 2, 81} <Dm&*fei&? 

s. x, mmzzLft-tz^m*. z^ntdirfxit^fiK *&m<D*n£izi&m& 

1209©*Q.3S©^, 1223-e^^>^ j£>f V ;* > htS„ ZL©tg#£ 80(1111 
»;*gU 02 3{C^^^121O0^lC51tfo 1210T-&, StfSfcO 0te|&5i,#,(the 
point at infinity)) \Z%}MittZ> 0 £ # ^ > # j £0lCOTffc-r£1211„ 

1212{ct, j#80^&sfr£e>fr£W)feU 2kftt>mfc-£tiT^ 

tl«^T-r-51222„ ^^T^##Pfc£*lTV>fctt*Ui, 1213, 1214, 1215, 12 

le&gkft&mt&mzft e> 0 zi^ai*, *#^-k'<z>v(j)#@©ffi£§i^&# 

13, 1214, 1215, 12161C#]SLT, 1217, 1218, 1219, 1220(Z)^SS:^f 1~& = 
1218, 1219, 12200D#t3ltC;i3^Tfci:, V(j)tf>ffi{C*ftf;-f SB [V(j)] fc^TftR 
ffi^jKDfOO^SSr^f-rSo 4BU 1220T-H:, il 7~i2 0O«i:IWj; l J 
, 3*B[j] £#D;lSfU>yiC, -B[j]£#IJx.§ (B[j]£5l<) c Z.<D&<DfrijK @ 
1 7~@2 0©#|tM*oTV>S„ 1217, 1218, 1219, 1220GD#t3l&;S&*:£:^, 
#?>#j&>f>*y*>hL1221, ^#^^S|12121CMS 0 3©^STiEb 

v^m^#e>tissatt0i 7~®2 (XDmmm&m&tmmv&z,, \±v vo> 

[0 0 0 6] 
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[0 0 0 7] 

[0®©ff8J|ifci&f8] 

[01] 

[02] 

v>r * n n > e^x - # (DMm*jjkt Eo 

[03] 
[04] 
[05] 

[06] 

[07] 

[0 8] 
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[09] 

flf r mm± otam z mm t s r=. & © a. 

[®10] 
[011] 

mi 2] 

m R Jt x * ^ - ^tf-^asff# ^ n - ^ v - h (x # ^ - 
[Hi 3] 
as). 

[S14] 
[01 5] 
[016] 

0o 

[017] 
[01 8] 
[01 9] 
[02 0] 
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[02 1] 
[02 2] 
[02 3] 
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[01] 



i ICiJ— K 



2] 




02 *n=J>fcf i— *©8tfifc 

201 202 




205 



207 



J 203 



204 



206 



1 
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2 
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C©4] 



04 T¥<^a>-^x-f>^*ffl^fc-<$mPl3fethW 



0403 



0404 



0405- 



0406 



Bite 



I 



M0]=1 
A[1]=y 

A[2]=y*2 mod N 
A[3]=y*3 mod N 



0401 



S=1 



0411 




No 




S— S 4 mod N 

~ T~ 




12 



*57 



xfl)8§fc'7 h<0fill*, OOA* 




>Yes 



0407 



► S=S*A[0] mod N 



No 



0408 



x(DSt§t*7 KDfittt, Olfr 

I 




S=S*A[1] mod N 



No 



x<D&mt£v hOfitfitu 10A* 




0409 



S=S*A[2] mod N 




No 



x©saf7 hotel*. ioa* 




0410 



S=S*A[2] mod N 
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[05] 



S=y 



j =512 



0501 



0502 



0506 



0503 

< ^ ,=ofr J > 

I to s~ 0504 



S^RAMfC«»(B[j-1] = S) 



S=S*4 mod N 



0505 



4 
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[06] 



< 



051 




0511 



0512 



0513 






S=1 



I 



0507 



0508 



i r 



0509 



j = 512** 



No 



x[j] = ~00"fr 
^"No 



x[j] = "01"fr 



No 



x[j] = "10"A^ 



No 



x[j] = "ir*> 



Yes 



Yes 



0519 



0514 



S=S*1 



0515 




S=S*B[j] mod N 




0516 



S=S*(B[j]"2> mod N 



Yes 




0517 



S=S*<B[jr3) mod N 



j=j + 1 
^08 



18 



5 
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[H7] 



07 T-r-r*>a> •■5 L x-r>^3£*ffl^fc'<#m»l^fffiC 



B[0] 



B[1] 



Bra 



B[3] 



B[4] 



B[509] 



B[510] 



B[511] 



ADDR 
AODR+128*1 
ADDR+128*2 
ADDR+128*3 
ADDR+128*4 



ADDR+128*509 
ADDR-M 28*510 
ADDR+128*511 



6 
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[0 8] 



@8 mnm&oi&& 
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[H9] 



@9 mpi^m±<omm 



P/^ / 


R 




{P+Q 
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1 0] 
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1 1] 



1 1 *gR«if§Jt(Dxa^-fgfnrs& 



0906 

j =j - 1 



3! 



S = P 



0901 



j = 80 



0902 



XNo 



Yes 



S£RAMlC«|fi(B[j-1] = S) 



S=4S 



0904 



0905 
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1 2] 



si 2 *£R«ifa-t<Dx* i 5— &nm.& 




j = j + 1 



0918 
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mi 3] 



@i3 RSAm*tmm\~*m>*mwmmm 



< 



1006 



gate 



I 



S = y 



I = 512 



1001 



1002 



^ ^ 1003 

i = o* ^> 



rNo 



S^RAI«C«tt{B[j-1] = S) 



S=S~4 mod N 



1004 



1005 



f 



1 2 
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[014] 




i r 



1007 



j = 5123^ 



Yes 



.No 



1023- 



i=j +1 



VO) = (17*(V0)+1) mod 513) -1 



1008 



1009 



f 
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1 5] 



mi 5 RSAm^&m~*n-z*mmnmm 



< 

1013 ^ 




1014 



1015 



1016- 






S=1 



i=0 



j = 512*> 



No 



x[V0)] = "OCT** 



No 
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